Writing to Memory

The main WinDbg command for edit command job is e\*.

0:009> dd esp L1
06daf884  77949bf9

0:009> **ed esp 41414141**

0:009> dd esp L1
06daf884  41414141

To directly write or modify ASCII characters using ea or Unicode characters using eu.

0:009> da esp
06daf884  "AAAA.."=...w...w"

0:009> **ea esp "Hello"**

0:009> da esp
06daf884  "Hello."=...w...w"

Write the content in EIP register

0:009> dd eip  L1
77911430  6c6c6548

0:009> ed EIP 41414141

0:009> dd eip L1
77911430  41414141

Write the EIP with ASCII

0:016> da eip 
00007fff`e61e7860  "..........."

0:016> ea eip "Hello"

0:016> da eip
00007fff`e61e7860  "Hello......"

Last updated